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SYSTEM AND METHOD OF DEFINING THE 
SECURITY VULNERABILITIES OF A COMPUTER SYSTEM 


ABSTRACT OF THE DISCLOSURE 

The present invention comprises a method of defining security conditions of a 
computer system for the purpose of detecting vulnerabilities. The method comprises 
the steps of specifying a attack representing a recognized vulnerability of the 
computer system, specifying at least one attribute of the specified attack, specifying at 
least one policy definition with respect to detecting the vulnerability of the specified 
attack, specifying at least one attribute of the specified policy definition, and 
specifying a remedy for the specified vulnerability. 


